Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa
File: ba00f5568b458b22b759d5b1a8240739564a882f.roa (raw, json)
Hash identifier: 4y/XEj/xakaUFKOQ0mum2qVBgE9JFcAgKF+tmqZNoUk=
Subject key identifier: 46:AE:1E:43:82:C1:3E:11:42:6D:1B:EC:B5:34:52:A2:8D:03:C9:DA
Certificate issuer: /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial: 1FD89E
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa
Signing time: Wed 29 Mar 2023 12:05:36 +0000
ROA not before: Tue 28 Mar 2023 12:04:49 +0000
ROA not after: Sat 29 Mar 2025 12:04:49 +0000
asID: 12684
IP address blocks: 201.220.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087070 (0x1fd89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Validity
Not Before: Mar 28 12:04:49 2023 GMT
Not After : Mar 29 12:04:49 2025 GMT
Subject: CN=ba00f5568b458b22b759d5b1a8240739564a882f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:b9:c4:95:b6:c9:57:64:c3:74:ce:57:a0:
19:05:7b:26:9e:ac:fc:43:ea:03:04:da:b2:05:77:
36:9c:20:76:23:d7:84:40:99:91:fc:ba:42:be:c7:
a5:35:08:af:83:d9:48:0d:0f:40:83:02:c0:51:1a:
76:69:0d:1c:00:b1:ce:09:c4:40:89:e6:16:bb:56:
66:1d:40:b5:60:09:07:32:22:2b:f2:c0:45:46:54:
9c:4a:d4:de:91:b2:96:94:4c:6b:42:13:e4:67:63:
00:5d:b8:13:1b:51:a8:dc:2e:e7:de:e3:ae:0d:ff:
ac:93:7b:a9:11:08:c5:14:a6:75:cc:bf:14:3e:5b:
55:29:c4:c7:a7:47:a5:28:aa:f4:ba:07:53:09:49:
cf:ea:9f:96:fe:55:f4:60:81:cf:e4:48:60:30:6d:
c9:c2:c9:fa:03:ca:d5:8a:41:c7:77:cd:36:fa:06:
2c:29:99:88:88:26:fe:26:db:4f:87:f0:ce:05:40:
e5:28:15:c0:af:ca:18:55:d4:74:b2:1f:76:28:37:
32:91:46:3e:3b:7c:7e:70:25:32:97:58:48:f7:b4:
56:b2:2b:7f:ca:98:3c:1d:5d:79:4d:da:2c:b8:91:
52:ce:61:80:69:08:1f:e8:27:76:e9:8e:c2:aa:b8:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:1E:43:82:C1:3E:11:42:6D:1B:EC:B5:34:52:A2:8D:03:C9:DA
X509v3 Authority Key Identifier:
keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/ba00f5568b458b22b759d5b1a8240739564a882f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:49:3b:0c:f1:f7:ca:0e:4e:ce:dd:ee:8f:c7:6e:27:6f:39:
b2:54:7e:6b:bb:19:b0:da:63:7f:31:e4:0f:a7:51:15:8f:b1:
51:bd:05:ff:11:40:62:8b:a6:8b:fb:c9:a8:2a:ce:80:60:51:
5a:0e:82:31:2d:71:3f:ce:1f:ff:a2:96:bd:6b:87:5c:28:94:
89:b8:36:71:b8:96:8d:da:f0:03:86:fa:df:16:36:c8:91:3c:
a6:40:de:08:9f:46:3d:c8:b9:20:1d:46:3d:4f:b2:ae:d4:e7:
4e:3f:a3:ab:05:82:2d:2a:95:75:98:1d:a8:4f:04:29:3f:10:
32:59:82:0d:7f:68:cd:2c:a3:d8:b0:10:19:5c:14:a6:45:1f:
b2:77:99:70:86:84:ef:75:c1:4e:41:bc:8a:e8:65:07:5b:c6:
1b:55:7d:d6:fa:ff:44:d5:06:89:1c:48:e2:c8:59:f6:4e:05:
d1:7d:54:0b:97:0d:99:a6:6e:a4:37:aa:d4:73:71:09:16:25:
e0:26:81:de:c7:20:3b:3d:4a:64:89:af:0b:c3:ec:37:88:d0:
36:42:b6:8d:01:26:54:e3:3a:d3:0e:b5:02:49:1d:c6:10:ab:
e1:6c:87:77:05:a3:41:62:88:fc:32:04:41:32:ca:5c:6b:de:
1a:29:1b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org